[MEDIUM] Moodle makes some user data available before completing second factor with MFA enabled

PKSA-t8h6-8c8g-v64h CVE-2025-3627 GHSA-x45j-jq9q-gf3q

Affected package: moodle/moodle

Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12

Reported by:
GitHub